AZ-305 Practice Test 2 — 10 Questions

Question 1

A media company is designing a storage solution for its large video files (average 50 GB each) that are edited by multiple users simultaneously. The solution must support SMB protocol for compatibility with existing editing software and provide low-latency access. The files must be stored in a highly available configuration across multiple availability zones in a single region. Which Azure storage solution should the company recommend?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Azure Files Premium tier with zone-redundant storage (ZRS). Azure Files Premium tier supports SMB protocol natively, which is required for compatibility with existing editing software. Zone-redundant storage (ZRS) replicates data synchronously across three availability zones within a single region, providing high availability and low-latency access for simultaneous editing of large video files.

Answer

Azure Blob Storage Premium tier with geo-redundant storage (GRS)

Answer

Azure Disk Storage with shared disks

Answer

Azure NetApp Files Premium tier with cross-zone replication

Question 2

You are an Azure administrator. The above Azure Policy definition is assigned to a subscription. A developer tries to deploy a Virtual Machine with SKU Standard_DS2_v2. What will happen?

Accepted Answer

The deployment is denied and an error message is returned.. The Azure Policy definition assigned to the subscription includes a 'deny' effect for VM SKUs that are not in the allowed list. Since Standard_DS2_v2 is not an allowed SKU, the deployment is denied and an error message is returned to the developer, preventing the VM from being created.

Answer

The deployment succeeds with a warning logged.

Answer

The VM is created but the SKU is changed to a different series.

Answer

The deployment succeeds because the policy only audits.

Question 3

Which TWO actions should you take to ensure business continuity for an Azure SQL Managed Instance? (Choose two.)

Accepted Answer

Enable automated backups with a retention period that meets your RPO. Automated backups are a fundamental component of business continuity for Azure SQL Managed Instance. They provide point-in-time restore capabilities within a configurable retention period (7-35 days), directly supporting your Recovery Point Objective (RPO) by allowing you to restore to any point within that window. This ensures that data loss is minimized to the backup frequency, which is typically every 5-10 minutes for transaction log backups.

Answer

Use Azure Site Recovery to replicate the instance to another region

Answer

Configure a readable secondary replica in the same region

Answer

Enable long-term retention (LTR) for backups

Question 4

Your company has a Microsoft Entra ID tenant with 10,000 users. You are designing an identity governance solution to automate user access reviews for critical applications. The compliance team requires that access reviews be conducted quarterly and that any reviewer who does not respond within 7 days have their decisions auto-approved. You need to implement the solution using Microsoft Entra ID Governance. What should you do?

Accepted Answer

Create an access review with 'Auto approve' after 7 days of no response.. The compliance team explicitly requires that unreviewed decisions be auto-approved after 7 days. In Microsoft Entra ID Governance, an access review can be configured with 'Auto approve' to automatically approve any reviewer decisions that are not submitted within the specified duration. This directly satisfies the requirement for quarterly reviews with a 7-day auto-approval policy.

Answer

Use Microsoft Entra Privileged Identity Management (PIM) to require activation for access to critical applications.

Answer

Create an access review with 'Auto deny' after 7 days of no response.

Answer

Create a recurring campaign in Microsoft Purview Compliance Manager.

Question 5

You have an Azure SQL Database that stores sales data. You need to ensure that the database can recover to any point in time within the last 35 days. What should you configure?

Accepted Answer

Configure the point-in-time restore (PITR) retention period to 35 days. Point-in-time restore (PITR) for Azure SQL Database allows you to restore a database to any point within the configured retention period. The default retention is 7 days, but you can increase it up to 35 days. By setting the PITR retention period to 35 days, you meet the requirement to recover to any point in time within the last 35 days.

Answer

Configure long-term retention (LTR) backups with a retention of 35 days

Answer

Create a secondary database in the same region

Answer

Enable geo-replication with a readable secondary

Question 6

Which TWO options are valid methods to secure access to Azure Cosmos DB?

Accepted Answer

Azure RBAC roles. Azure RBAC roles (Option C) provide fine-grained, role-based access control to Azure Cosmos DB, allowing you to assign permissions to users, groups, or service principals for operations like read, write, or delete on specific resources. Primary and secondary keys (Option D) are the default authentication method, enabling full access to the Cosmos DB account for data plane operations, and are commonly used for application connections.

Answer

X.509 certificate-based authentication

Answer

Azure Storage account keys

Answer

Shared access signatures (SAS)

Question 7

Drag and drop the steps to migrate an on-premises SQL Server database to Azure SQL Database using the Data Migration Assistant (DMA) into the correct order.

Accepted Answer

Install DMA, then Assess, then Fix issues, then Migrate and Monitor. The correct sequence for migrating an on-premises SQL Server database to Azure SQL Database using the Data Migration Assistant is: first, install the DMA tool; second, run an assessment to identify compatibility issues; third, fix the identified issues; and finally, perform the migration and monitor the process. This order ensures that all potential problems are resolved before migration, reducing the risk of downtime or data loss.

Answer

Assess, then Install DMA, then Fix issues, then Migrate and Monitor

Answer

Install DMA, then Migrate and Monitor, then Assess, then Fix issues

Answer

Fix issues, then Install DMA, then Assess, then Migrate and Monitor

Question 8

Your organization uses Azure Monitor to collect metrics from Azure resources. You need to create a custom metric alert that triggers when the average CPU usage of a specific virtual machine exceeds 80% for 10 minutes. Which TWO components are required? (Choose two.)

Accepted Answer

Metric alert rule. A metric alert rule is required because it defines the condition (average CPU > 80%) and the evaluation frequency (every 1 minute over a 10-minute aggregation window) that triggers the alert. Without the rule, Azure Monitor has no logic to evaluate the metric data and fire the alert.

Answer

Automation runbook

Answer

Log Analytics workspace

Answer

Diagnostic setting

Question 9

Refer to the exhibit. You deploy this ARM template to create a storage account in the West US region. The business continuity requirement states that if the primary region becomes unavailable, the storage account must be readable within 1 hour. What is the most important limitation of this configuration?

Accepted Answer

The storage account does not support read access in the secondary region, so manual failover is required, which may exceed the 1-hour RTO. The ARM template configures GRS (Geo-Redundant Storage), which replicates data to a secondary region but does not provide read access to that data unless a manual failover is initiated. Without read-access geo-redundant storage (RA-GRS), the storage account cannot be read in the secondary region within 1 hour of a primary region outage, as manual failover requires user intervention and may take longer than the RTO. The business continuity requirement demands readability within 1 hour, which is not guaranteed with standard GRS.

Answer

The storage account uses GRS, which replicates data only to a secondary region within the same geography, not to a different region

Answer

The storage account only supports HTTPS traffic, which blocks replication

Answer

The storage account is configured with the Hot access tier, which prevents failover

Question 10

Your company is designing a hybrid network architecture that connects multiple on-premises sites to Azure. You need to ensure high availability and redundancy for the connection. Which TWO solutions should you recommend? (Choose two.)

Accepted Answer

Deploy two ExpressRoute circuits in active-passive mode. Deploying two ExpressRoute circuits in active-passive mode provides redundancy for the on-premises-to-Azure connection. If the primary circuit fails, traffic automatically fails over to the passive circuit, ensuring high availability. Option C is correct because an Azure VPN Gateway in active-active mode uses two active tunnels to provide redundancy and load balancing, which is essential for a highly available hybrid network.

Answer

Implement Azure DNS Private Resolver for resolution

Answer

Use a single VPN gateway with active-standby mode

Answer

Use a single ExpressRoute circuit with a VPN gateway as failover